Senior Security Architect

Description

The company builds digital services, Workday solutions and new technology, and its projects include visa and passport processing, hospital medical records, and global financial management and HCM systems.

This is a senior role combining hands-on security architecture with managing, coaching and developing a small team of staff.

You will work in a diverse team of problem solvers and collaborators.

Responsibilities

• Design and apply strong security practices in the cloud services, platforms and applications the company builds for customers.
• Work with Agile delivery teams so they apply good security practice throughout software development.
• Learn and adopt new technologies and approaches alongside experienced colleagues.
• Share knowledge and teach good security practice to customers and company staff.
• Manage, coach and develop a small team, focusing on individual performance and career progression.
• Give direction and leadership as the team solves hard problems together.

Requirements

• Proven ability to lead the secure design of new cloud services and solutions that follow defined security strategies.
• Skill in spotting security weaknesses in existing system designs and proposing practical fixes that weigh cost, risk and usability.
• Working knowledge of security standards and regulations such as NCSC, ISO, SoC, NIST, PCI and GDPR.
• Experience in at least one specialism: AI, ML, data, cloud, M365 or security architecture.
• Experience in application architecture, software development, or infrastructure architecture.
• Industry experience in at least one sector: public, healthcare, defence or commercial.
• Experience testing the security of software and infrastructure with suitable tools.
• Experience with continuous security, continuous integration and continuous delivery.
• Experience with network security (such as OSI and TCP/IP), web application security (such as OWASP) and cryptographic controls (such as PKI and TLS).
• A record of managing, mentoring and coaching team members and the wider community.
• Strong communication skills, able to explain security complexity to audiences with varied technical knowledge, from senior stakeholders to development teams.
• Desirable: experience with identity management and authentication and authorisation products and patterns.
• Desirable: experience in at least one industry vertical.
• Desirable: involvement across the full security lifecycle, including governance, risk and compliance, operational security, supply chain security and secure user management.
• Desirable: active knowledge sharing within the team, across the wider capability, and externally where suitable.
• Desirable: penetration specialist certifications.

Conditions

The company welcomes applicants from all backgrounds and will tailor the recruitment process to your needs if you ask for adjustments.